{"id":345,"date":"2020-08-25T23:32:39","date_gmt":"2020-08-25T15:32:39","guid":{"rendered":"https:\/\/wp.dj47.top\/?p=345"},"modified":"2021-10-20T16:16:17","modified_gmt":"2021-10-20T08:16:17","slug":"lnmp%e7%8e%af%e5%a2%83%e4%b8%8b%e9%85%8d%e7%bd%aessl-2","status":"publish","type":"post","link":"https:\/\/www.djlog.cn\/?p=345","title":{"rendered":"LNMP\u73af\u5883\u4e0b\u914d\u7f6eSSL"},"content":{"rendered":"

Nginx\u914d\u7f6eSSL\u793a\u4f8b<\/p>\n

server\r\n    {\r\n        listen 443 ssl;\r\n        #ssl on;\r\n        server_name wo.dj47.top;\r\n        index index.php index.html index.htm;\r\n        root  \/home\/wwwroot\/default\/wo\/public;\r\n \r\n        ssl_certificate   \/usr\/local\/nginx\/conf\/cert\/4399318_wo.dj47.top.pem;\r\n        ssl_certificate_key  \/usr\/local\/nginx\/conf\/cert\/4399318_wo.dj47.top.key;\r\n        ssl_session_timeout 5m;\r\n        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;\r\n        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;\r\n        ssl_prefer_server_ciphers on;\r\n \r\n        include enable-php.conf;\r\n \r\n        #\u5165\u53e3\u6587\u4ef6\u9690\u85cf\r\n        location \/ {\r\n          if (!-e  $request_filename) {\r\n             rewrite ^\/(.*)$ \/index.php?s=$1 last;\r\n           }\r\n        }\r\n \r\n        location \/nginx_status\r\n        {\r\n            stub_status on;\r\n            access_log   off;\r\n        }\r\n \r\n        location ~ .*\\.(gif|jpg|jpeg|png|bmp|swf)$\r\n        {\r\n            expires      30d;\r\n        }\r\n \r\n        location ~ .*\\.(js|css)?$\r\n        {\r\n            expires      12h;\r\n        }\r\n \r\n        location ~ \/\\.\r\n        {\r\n            deny all;\r\n        }\r\n \r\n        access_log  \/home\/wwwlogs\/wo_dj47_top_access.log;\r\n        error_log  \/home\/wwwlogs\/wo_dj47_top_error.log;\r\n    }<\/code><\/pre>\n
HTTP\u8df3\u8f6cHTTPS\u793a\u4f8b<\/p>\n
\u00a0\u00a0\u00a0\u00a0#301\u8df3\u8f6c<\/span><\/p>\n
\u00a0\u00a0\u00a0\u00a0#rewrite ^(.*) https:\/\/$host$1 permanent;<\/span><\/p>\n
\u00a0\u00a0\u00a0\u00a0if ($scheme = http ) {<\/span><\/p>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0return 301 https:\/\/$host$request_uri;<\/span><\/p>\n
\u00a0\u00a0\u00a0\u00a0}<\/span><\/p>\n
server\r\n    {\r\n        listen 80;\r\n        server_name wo.dj47.top;\r\n        index index.php index.html index.htm;\r\n        root  \/home\/wwwroot\/default\/wo\/public;\r\n \r\n        #301\u8df3\u8f6c\r\n        #rewrite ^(.*) https:\/\/$host$1 permanent;\r\n        if ($scheme = http ) {\r\n            return 301 https:\/\/$host$request_uri;\r\n        }\r\n \r\n    include enable-php-pathinfo.conf;\r\n \r\n    #\u5165\u53e3\u6587\u4ef6\u9690\u85cf\r\n        location \/ {\r\n          if (!-e  $request_filename) {\r\n             rewrite ^\/(.*)$ \/index.php?s=$1 last;\r\n           }\r\n        }\r\n \r\n \r\n        location \/nginx_status\r\n        {\r\n            stub_status on;\r\n            access_log   off;\r\n        }\r\n \r\n        location ~ .*\\.(gif|jpg|jpeg|png|bmp|swf)$\r\n        {\r\n            expires      30d;\r\n        }\r\n \r\n        location ~ .*\\.(js|css)?$\r\n        {\r\n            expires      12h;\r\n        }\r\n \r\n        location ~ \/\\.\r\n        {\r\n            deny all;\r\n        }\r\n \r\n        access_log  \/home\/wwwlogs\/wo_dj47_top_access.log;\r\n        error_log  \/home\/wwwlogs\/wo_dj47_top_error.log;\r\n    }<\/code><\/pre>\n
\n
\u6ce8\uff1a\u5982\u9047\uff1anginx\u914d\u7f6eSSL\u540e\u62a5\u9519nginx: [warn] the “ssl” directive is deprecated, use the “listen … ssl”\u00a0<\/span>\u00a0\u7684\u89e3\u51b3\u65b9\u6cd5<\/p>\n
\u5927\u610f\u4e3a\u63d0\u793a\u539f\u6709ssl on;\u8fd9\u4e2a\u914d\u7f6e\u5df2\u5931\u6548 \u4f7f\u7528listen 443 ssl;\u66ff\u4ee3<\/p>\n
server {\r\n        listen 443 ssl;\r\n        server_name wo.dj47.top;\r\n        index index.php index.html index.htm;\r\n        root  \/home\/wwwroot\/default\/wo\/public;\r\n \r\n        ssl_certificate   \/usr\/local\/nginx\/conf\/cert\/4399318_wo.dj47.top.pem;\r\n        ssl_certificate_key  \/usr\/local\/nginx\/conf\/cert\/4399318_wo.dj47.top.key;\r\n        ssl_session_timeout 5m;\r\n        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;\r\n        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;\r\n        ssl_prefer_server_ciphers on;\r\n}<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
Nginx\u914d\u7f6eSSL\u793a\u4f8b server { listen 443 ssl; #ssl on; server_n […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[8],"tags":[40],"class_list":["post-345","post","type-post","status-publish","format-standard","hentry","category-8","tag-linux"],"_links":{"self":[{"href":"https:\/\/www.djlog.cn\/index.php?rest_route=\/wp\/v2\/posts\/345","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.djlog.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.djlog.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.djlog.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.djlog.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=345"}],"version-history":[{"count":0,"href":"https:\/\/www.djlog.cn\/index.php?rest_route=\/wp\/v2\/posts\/345\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.djlog.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=345"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.djlog.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=345"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.djlog.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=345"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}